Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vt7U8BaE3WAWN1s2pJ8OXWOkWVE.roa
File:                     vt7U8BaE3WAWN1s2pJ8OXWOkWVE.roa (raw, json)
Hash identifier:          xgNUFNM7x3NUO5pFaGSEXrcXnlXgDFmwQKB+OEqMCGg=
Subject key identifier:   BE:DE:D4:F0:16:84:DD:60:16:37:5B:36:A4:9F:0E:5D:63:A4:59:51
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0195F04BBC469F88D95A8C9452740B9B1797
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vt7U8BaE3WAWN1s2pJ8OXWOkWVE.roa
Signing time:             Tue 01 Apr 2025 07:40:50 +0000
ROA not before:           Tue 01 Apr 2025 07:40:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59993
IP address blocks:        151.243.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f0:4b:bc:46:9f:88:d9:5a:8c:94:52:74:0b:9b:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Apr  1 07:40:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=beded4f01684dd6016375b36a49f0e5d63a45951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:74:a8:90:9f:ca:2c:12:8f:d4:c6:48:a2:
                    b3:7b:41:2d:ce:e8:5a:43:c7:b4:a6:7c:c1:1a:86:
                    b4:9d:a3:6a:3b:ca:cb:8a:2b:a3:73:e0:ac:29:89:
                    65:28:e3:49:70:0c:92:59:c7:0e:df:7a:a0:a6:2a:
                    48:de:e9:fc:91:84:85:02:a9:d6:14:3e:3c:31:8e:
                    1e:c3:6d:36:0a:ac:5a:f4:52:95:50:32:41:c6:59:
                    52:c3:56:b9:3f:a6:0a:37:42:a9:0d:4f:76:b6:99:
                    e7:cc:ba:13:f5:8f:21:73:dd:18:39:ba:ad:d6:62:
                    e8:f5:da:19:3b:aa:89:b6:57:b9:96:c6:05:31:bb:
                    d6:02:b3:f1:66:34:9f:7f:57:c1:6a:e7:59:39:64:
                    86:e1:a8:13:6b:ae:69:09:9a:98:9e:03:7f:6b:d5:
                    bc:1c:43:09:34:e6:95:e4:3e:06:a9:95:02:2a:94:
                    26:dc:91:c6:f7:ce:a2:03:a5:bb:32:6c:e5:9b:8f:
                    8a:31:34:20:a9:bb:68:58:98:94:7d:7b:73:cc:ea:
                    c9:d2:14:90:53:9b:91:95:b1:10:2e:3f:92:c3:29:
                    0d:41:bc:58:24:1a:45:2f:0a:18:ef:f0:d6:9c:06:
                    fd:3d:89:b5:86:2e:aa:1b:5f:b3:6c:7e:39:e0:49:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:D4:F0:16:84:DD:60:16:37:5B:36:A4:9F:0E:5D:63:A4:59:51
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vt7U8BaE3WAWN1s2pJ8OXWOkWVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:39:e8:92:9f:ab:d7:04:3a:80:b9:e0:a8:e5:0f:f0:11:bf:
         7d:75:06:ab:a8:51:1b:60:75:80:84:70:9d:e5:16:e5:ea:4d:
         b9:00:b6:9d:ef:bf:ec:de:91:55:e7:3a:28:e2:6f:77:0b:e2:
         4c:aa:11:69:e7:45:6e:2b:be:27:0d:46:0c:16:c4:ca:c6:9c:
         48:93:08:4e:62:5d:f8:3a:80:bb:91:de:1d:f9:44:98:9a:aa:
         9a:54:a6:2a:0c:ce:06:ee:ac:7a:8b:08:e8:f2:97:b7:de:aa:
         62:57:97:cb:85:eb:74:bc:d9:ff:59:1b:c8:2f:cd:30:d3:78:
         9a:ef:24:d5:a0:5a:e4:b8:13:05:f4:40:a8:a1:cb:62:ca:f1:
         41:93:8d:4a:da:51:c5:23:a8:eb:42:08:0b:33:15:a8:e3:e2:
         65:e7:97:30:46:a1:b4:ba:41:c4:f7:94:68:35:fc:11:bd:5f:
         70:b5:55:2a:b7:b0:61:23:bc:0a:16:7b:85:80:65:a4:60:9d:
         d0:d4:8c:e9:5d:a9:03:13:c1:91:b6:a3:9e:46:19:05:95:37:
         72:3d:3e:36:9c:fe:fc:6b:f7:12:f7:f3:37:e8:fd:24:c8:0d:
         c3:5f:29:de:43:67:b2:07:a9:c4:b4:01:06:3a:ac:bd:bf:a6:
         42:e0:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net